Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/2iawdTNRAh1zMLPtNSSUfzd99zU.roa
File: 2iawdTNRAh1zMLPtNSSUfzd99zU.roa (raw, json)
Hash identifier: glHA3I9GeCgeFCksuKJN4v0XXNiSd6eBOO+HCKjdMxc=
Subject key identifier: DA:26:B0:75:33:51:02:1D:73:30:B3:ED:35:24:94:7F:37:7D:F7:35
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019778F47B9DFCF2579E4B67DC3D253BB578
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/2iawdTNRAh1zMLPtNSSUfzd99zU.roa
Signing time: Mon 16 Jun 2025 13:36:17 +0000
ROA not before: Mon 16 Jun 2025 13:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:f4:7b:9d:fc:f2:57:9e:4b:67:dc:3d:25:3b:b5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jun 16 13:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da26b0753351021d7330b3ed3524947f377df735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:f8:b5:7d:ef:2c:2e:1a:52:30:e8:41:ce:
3b:b8:11:fb:4b:7a:eb:0d:43:c1:d6:66:68:21:6a:
3c:b7:40:6a:82:7d:45:60:0d:4b:34:e9:9c:14:ed:
50:0b:3a:f6:e1:4b:c4:8d:67:e9:5a:37:c8:39:41:
92:e2:91:f3:1d:ea:95:0f:b7:62:48:6a:00:d8:83:
c5:8a:24:17:92:db:5e:8f:f9:5d:50:6a:1e:23:ca:
25:8c:f1:40:86:d6:17:47:e3:fa:82:e3:b1:bf:71:
31:a2:9c:ca:d4:19:ef:aa:e6:6c:68:a9:f2:67:54:
00:4a:35:53:73:b4:23:8c:ea:b7:b1:74:80:19:9d:
1c:d4:e0:05:0c:80:87:c1:59:ac:93:5b:b7:39:cd:
83:57:7d:53:ea:e4:65:55:23:f2:d3:c2:33:5d:1a:
e9:07:00:a4:cf:57:42:4b:12:1b:63:d6:59:bc:d7:
32:94:37:7d:a5:ff:40:26:0c:4a:83:07:1a:b8:f4:
63:33:b3:1e:65:a0:17:5b:bc:a9:5f:51:5a:6e:a9:
a2:b2:6b:41:c7:e3:f2:a4:1b:ac:79:87:50:5a:c1:
05:1c:d9:44:9c:6b:1c:bf:0c:05:13:d2:c0:36:ad:
0d:91:43:5f:a5:c5:91:e2:f3:11:1c:56:b4:62:93:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:B0:75:33:51:02:1D:73:30:B3:ED:35:24:94:7F:37:7D:F7:35
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/2iawdTNRAh1zMLPtNSSUfzd99zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0-178.210.166.255
178.210.168.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
1b:17:c2:49:9a:15:af:02:ac:c5:0c:cb:1a:9c:6e:d4:9f:06:
6c:fb:cb:28:5b:db:53:e2:28:3a:36:b0:b1:c4:68:0a:15:91:
e5:77:64:5d:a6:59:ee:d0:a6:1f:b8:8d:5f:65:e3:78:8a:92:
92:45:3d:33:73:52:27:88:85:da:b9:55:9f:94:a2:05:17:71:
18:3e:02:de:87:20:6d:a6:42:e8:28:f0:6d:be:c2:c5:40:b4:
c3:ab:ae:4c:08:90:e6:f0:5b:6b:14:f0:d8:f1:c3:ca:2f:1b:
72:28:c0:7b:5e:c7:3a:8f:40:11:4c:6d:18:76:b0:24:fe:d9:
10:72:7f:c7:97:6b:b7:1b:d6:09:0f:b8:8e:d0:0a:c3:b6:c2:
54:89:18:52:a7:2b:e9:99:7f:df:41:1d:55:84:0b:df:ca:37:
02:17:04:53:d5:de:fe:7a:ba:ed:5d:9d:40:02:c9:40:89:3f:
97:0e:e0:80:7c:75:cd:bc:53:b4:31:63:1c:77:b1:d6:8a:d1:
3f:90:1b:c8:25:c5:5e:d2:2d:51:06:00:67:4c:44:f3:67:c9:
1b:20:b8:91:d2:de:0f:25:e7:4f:41:6f:0a:67:20:34:6b:23:
56:05:ae:b1:b0:93:70:a8:6f:dc:7a:b2:0c:76:b0:cf:fa:3e:
7f:7d:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:56 2025 by rpki-client